
Microsoft has affirmed its commitment to shipping IE10 and Windows 8 with “Do Not Track” (DNT) enabled by default. In doing so, it’s set the stage for a major war over user privacy, and appointed itself an unofficial white knight of user privacy.
Feel free to pause a moment and let the cognitive dissonance fade.
For those of you just tuning in, Do Not Track is a proposed privacy flag whose implementation is currently being drafted by the W3C. As currently implemented, a browser with DNT activated notifies the target website that the user does not wish to be tracked. A website that supports DNT would (theoretically) honor the flag and agree not to track the visitor’s activities. DNT is a voluntary standard — there’s no federal or state law mandating its use and very few websites currently support it. If a website doesn’t support DNT, turning it on in the browser does nothing.
A number of advertisers have signed on to help draft the DNT standard in a bid to avoid a government-mandated solution that might be far more limiting, but that doesn’t mean they like it. Microsoft’s initial statement that DNT would be enabled by default came as a total surprise to many of the participants in the W3C’s draft process and was sharply criticized from certain quarters. In June, the W3C changed the DNT draft to propose that browsersmust ship DNT off by default and enable it only if the user gives “explicit consent.” This implied that if Microsoft went ahead and shipped IE10 with DNT activated, it wouldn’t be able to claim its browser supported DNT.

Microsoft’s unofficial response? “Bring it.” In a recent blog post, Brendon Lynch, MS’s Chief Privacy Officer, spelled out how DNT is implemented in IE10. Users who choose “Express Settings” for browser configuration at first-run will have their DNT flag enabled. Users who choose to customize their options will be prompted to set the flag manually. In both cases, users are told what the DNT flag is and how to change it if they choose to do so.
“Our approach,” Lynch writes, “is part of our commitment to privacy by design and putting people first. We believe consumers should have more control over how data about their online behavior is tracked, shared, and used.”
Ulterior motive?
A number of pundits have questioned whether or not Microsoft is using privacy issues to strike at Google’s advertising empire. The truth is, we don’t know. Some draft standards are widely adopted before the final version is complete — 802.11n was a good example of this — but with DNT, the implementation is still being worked on. Browsers that support DNT tend to do it in different ways, and websites are waiting for a better understanding of what they need to do before they go ahead with implementing it.
Microsoft’s decision to ship DNT as active by default isn’t actually going to mean much right away. It’s already led the W3C to consider modifying the DNT proposal; the business interests working on the standard are petrified that an opt-in network will destroy their companies and bombard users with constant requests for data sharing. Some of these concerns are shared by privacy advocates; a standard that destroys companies and creates an impenetrable tangle of pop-ups is in no one’s best interests.

Visit Wired with IE10 and DNT enabled, and this is what you’ll see
For the moment, I’m willing to take Microsoft at its word. What’ll be critical to watch is how the company implements DNT on its own websites, what it advocates as the standard evolves, and whether its positions take principled stands on defending users’ rights, or are drawn in a way that benefits itself while choking out the competition. This is a move that really could go either way. If Windows 8 catches fire, it’ll fundamentally change the way Microsoft interacts with its customers and users. It’s fair to give the company a chance to demonstrate the principles it intends to uphold as part of that change — but it’s also fair to keep a weather eye on what’s going on behind the scenes.



As Linux has shown time and time again over the last 20 years, with even the best free software, you typically get what you pay for: half-realized concepts, poor user interfaces, and support that’s either nonexistent or completely relegated to a community that may or may not be able to help you with whatever issue you’re facing. More elaborate software package (Windows, Office, most games) have tons of research, testing, and design muscle behind them. They’re so easy, and in many cases fun, to use because the companies have the money to ensure they are that way. That involves a lot of people and a substantial investment, and I have no problem with that being protected.
Steam may encourage people to use paid software on Linux, but it will also force them to expand their horizons by experiencing firsthand what the operating system is capable of. Linux has a reputation of being limiting and difficult to use, and if it’s not entirely unearned, this could go a long way to helping the community prove how much the OS has evolved and improved in recent years.
As far as what this means for you, if you are not doing anything malicious then you don’t need to worry too much. Patriot Act exceptions aside, you would have to be acting suspiciously enough for a judge to grant a warrant before your conversations could be snooped. With that said, it is a bit disconcerting that it is possible to violate your privacy, especially when you aren’t doing anything to warrant such potential invasions.




After having several conversations with Cisco representatives, I’m hopeful that the company is serious about these changes. Is it possible that this was a cynical land-grab to see what customers would or wouldn’t tolerate? Absolutely yes — and that’s why we’ll keep an eye on the situation and the documents in question. At the same time, we need to acknowledge that the company’s statements track nearly perfectly with a list of recommendations we made earlier this week.



Judging by the rumblings being made by the director of China’s National Supercomputing Center, though, perhaps America should get used to this being a three horse race. Speaking to